Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/4d795fd4-5056-3b9c-b858-b66bf1907e2f.roa
File:                     4d795fd4-5056-3b9c-b858-b66bf1907e2f.roa (raw, json)
Hash identifier:          Bw9TDcytxeG737jERKjC5EL2ythGnNTwLzM4KKbyDFQ=
Subject key identifier:   CC:AF:31:24:9D:E8:FF:14:8A:BE:EF:3A:B2:CA:65:7C:A8:92:0D:33
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F43285847C4A9FF25665CCC4AFE934776
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/4d795fd4-5056-3b9c-b858-b66bf1907e2f.roa
Signing time:             Mon 04 Nov 2024 14:00:48 +0000
ROA not before:           Mon 04 Nov 2024 14:00:48 +0000
ROA not after:            Sun 02 Feb 2025 14:00:48 +0000
asID:                     6167
IP address blocks:        2600:100b:f100::/44 maxlen: 44

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:c4:a9:ff:25:66:5c:cc:4a:fe:93:47:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Nov  4 14:00:48 2024 GMT
            Not After : Feb  2 14:00:48 2025 GMT
        Subject: CN=92f02b37-94d9-47d0-a7ff-96a4d2937675
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:f8:7b:b3:1a:43:8b:c2:33:cb:60:8d:c9:d0:
                    60:02:e2:ed:b5:1f:f0:5b:c5:b0:ef:85:a7:02:c3:
                    a8:3d:af:e4:07:78:73:eb:63:96:38:91:8e:0f:6e:
                    ef:c9:a3:7d:9c:15:d0:17:ab:84:69:bb:15:ea:32:
                    23:c7:3e:9c:7e:5d:49:d5:f5:55:0f:e3:d0:bd:0f:
                    cd:85:48:a2:8c:4b:32:e9:a1:ba:f0:a5:3b:2c:10:
                    58:55:63:ca:b7:9f:e3:0d:09:17:5c:21:95:dc:78:
                    e5:db:bb:a8:e4:d6:8d:c5:55:a2:68:ff:92:0b:15:
                    a6:3f:dd:a4:8c:79:ed:48:74:8e:d2:27:92:d4:70:
                    ca:0b:bd:b7:ad:f6:23:dd:b3:69:11:e4:0f:3e:25:
                    b6:c5:53:d5:54:f0:57:79:cf:5d:11:9c:bc:4f:aa:
                    a0:a9:28:96:c9:37:e6:5e:72:7a:a6:ce:f2:00:bb:
                    8c:c4:b3:78:a7:17:04:8d:a7:57:54:72:e6:d8:e3:
                    48:0b:3d:ba:04:78:99:ed:ba:aa:97:82:12:45:5b:
                    14:11:31:62:9a:d7:4d:2d:0c:99:f4:63:d5:42:23:
                    7c:7c:c9:46:6d:7f:a5:b3:57:93:bd:10:25:3a:d1:
                    e4:3b:76:02:43:59:3f:b3:6e:a6:94:29:c4:9a:c9:
                    c0:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:AF:31:24:9D:E8:FF:14:8A:BE:EF:3A:B2:CA:65:7C:A8:92:0D:33
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/4d795fd4-5056-3b9c-b858-b66bf1907e2f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:100b:f100::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         37:81:da:aa:c0:bc:cf:32:3c:b5:65:77:6d:3c:d8:e3:8e:75:
         27:f6:86:5d:ec:66:f9:16:6f:13:60:7c:c3:9d:22:a6:d3:fa:
         a2:20:f8:7c:ed:7f:7e:60:54:5c:1b:01:a4:68:25:14:73:d9:
         bc:a0:89:1a:05:75:ad:b5:8b:a8:d1:54:8a:2b:48:0c:37:a3:
         71:1a:e9:b7:95:74:37:5e:f8:ff:6f:d0:f7:70:94:62:d5:97:
         ac:33:f4:89:71:65:1b:b6:ab:93:d1:9f:92:b2:82:48:f2:b4:
         1b:2b:27:07:1e:75:02:64:90:a7:c7:3f:7e:82:75:41:64:19:
         51:4a:c5:bc:4c:b2:de:a1:26:d1:94:fd:fc:6e:f4:e8:ef:eb:
         4b:6c:9d:da:6b:de:57:f9:1c:d0:8e:0a:f3:e6:88:1e:88:f9:
         5d:49:de:2d:39:0b:cf:61:d5:81:a7:f2:e7:bd:96:8c:a3:49:
         6c:65:70:0c:29:86:2e:a0:b6:cc:0a:45:08:1a:c3:1a:71:63:
         7e:3f:18:4b:07:e1:b4:2c:0f:85:95:d1:74:83:bc:84:95:32:
         77:cc:a6:8d:e2:29:f2:fc:d4:04:60:85:71:a6:0f:29:37:8d:
         6b:33:b9:92:1f:62:08:01:dd:33:96:f6:ab:b1:53:38:7e:bb:
         8c:50:60:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 23:41:25 2024 by rpki-client on console-ams.rpki-client.org